Solidity Audit Precheck

Automated pre-audit checklist for Solidity smart contracts. Runs SWC registry scan, OpenZeppelin pattern validation, gas optimization suggestions, and common...

This skill appears to do what it advertises: run local static analysis, linting, and AST checks on Solidity code. Before installing or following its install commands: 1) inspect the remote installer (foundry.paradigm.xyz) before running curl | bash and prefer platform packages or pinned installers where possible; 2) install Python/Node/Rust tools in isolated environments (virtualenv, nvm, cargo home) or CI containers to limit system impact; 3) pin tool versions to ensure reproducible results; 4) don't provide any secrets—the skill does not request them and they are unnecessary; 5) treat automated checks as a pre-filter only and still obtain a manual audit for production deployments. If you want higher assurance, ask the author for a signed, versioned install manifest or prefer installing tools from your organization's approved package sources.

Type: OpenClaw Skill Name: solidity-audit-precheck Version: 1.0.1 The skill provides a comprehensive workflow for auditing Solidity contracts using legitimate security tools like Slither, Mythril, and Foundry. However, it requires high-risk system operations in SKILL.md, including installing multiple packages via pip, npm, and cargo, and executing a 'curl|bash' command from foundry.paradigm.xyz. While these actions are plausibly needed for the stated purpose of setting up a security toolchain, the requirement for broad shell access and third-party binary execution on the host system meets the threshold for a suspicious classification.